Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File: dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier: cuZj3+m64ZFYp5p5pOAtSXqRzWwTh/m1EMoV+D9rNTU=
Subject key identifier: 23:BA:23:C5:3B:55:4F:DF:B0:39:20:5A:70:D9:6A:AC:68:AB:E9:6D
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial: 0194BC04AD2ACBC508A739D9DCB562B3C47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number: 02D4
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: MTQgR11n8OgvlyLMHBxuzrx1mPKrlVpVgQk9L6RzCFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:2a:cb:c5:08:a7:39:d9:dc:b5:62:b3:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=23ba23c53b554fdfb039205a70d96aac68abe96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:3d:c9:2e:fb:7d:48:24:25:7d:76:ea:53:
34:37:48:41:1d:ab:dc:f0:1f:ba:e4:21:27:d6:20:
27:2e:aa:45:ff:63:a6:2c:cf:bf:0c:2e:0a:f2:df:
bf:4e:ed:5e:db:ca:70:b0:5f:06:9c:f2:32:67:0c:
02:17:6e:37:1c:9f:3d:22:57:ac:98:13:69:8d:8c:
a0:59:f9:bf:78:a9:3f:27:50:30:a1:e6:86:04:36:
47:af:b4:b7:a7:84:c3:95:75:99:af:3f:5f:9f:f5:
81:0f:1e:9e:b0:bd:eb:a9:9e:9f:c1:8d:95:ba:d3:
44:cc:42:de:cd:76:f3:75:9f:f1:6b:a7:c3:a8:77:
a6:fc:ea:0b:bd:95:13:c9:1b:51:02:80:a4:60:fb:
f5:67:8e:b2:2f:a6:bc:91:a2:00:0d:06:c2:35:9d:
e2:64:44:7d:e2:06:be:c6:8b:5b:63:99:7b:a4:6e:
3f:00:32:17:ef:25:3c:ae:80:51:89:89:16:d4:72:
f5:29:36:d1:00:59:33:46:4a:be:20:61:57:26:89:
f8:f9:ea:83:3c:03:7e:2a:40:4f:b9:d0:e1:e9:99:
ce:34:55:de:33:2f:14:ec:d5:a9:8a:5e:ca:7d:21:
ec:7e:e6:31:c7:01:5b:ea:93:5b:8b:2a:de:fb:2f:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:23:C5:3B:55:4F:DF:B0:39:20:5A:70:D9:6A:AC:68:AB:E9:6D
X509v3 Authority Key Identifier:
keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:53:3b:94:83:55:83:8e:1e:81:9b:6e:73:00:f1:52:b2:4f:
04:a7:76:71:43:79:a3:70:08:93:2f:48:96:37:45:b0:45:8b:
ae:54:14:c0:77:e8:0d:09:8c:ae:ed:8b:2e:a5:bb:05:01:f3:
ff:91:4d:f4:9b:bd:38:c7:da:69:f4:57:87:af:c5:e8:d1:46:
db:3e:b3:7f:d8:b2:67:70:cd:e1:fe:bc:67:5f:07:0b:d3:2e:
5d:6a:16:7f:b5:f5:84:8f:f8:7a:2f:f3:7a:03:f9:bb:19:30:
89:65:3f:73:af:b2:d4:fd:ad:99:5a:78:bc:16:c6:3c:67:d2:
8a:9c:ab:73:22:70:1b:fb:ca:69:95:04:b9:c4:fc:65:a2:af:
ea:ab:58:02:6a:7c:d2:1b:19:15:bb:fd:a2:7c:06:71:47:4c:
91:2f:4d:21:f1:9d:ad:1b:14:f2:da:46:88:bb:d6:61:0f:14:
a7:ad:7a:72:ad:95:cc:c8:ae:f4:01:ec:54:02:70:56:3d:0f:
d6:16:7b:ad:43:2e:71:00:69:7c:dc:32:1d:28:8a:bf:9f:df:
79:2a:3a:d7:44:8a:72:94:a8:8b:d0:cd:0b:94:42:84:21:56:
6f:5a:e2:75:0f:e9:55:ee:e7:af:85:71:07:20:e2:e1:c4:58:
b6:24:d4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:37 2025 by rpki-client